Static task
static1
Behavioral task
behavioral1
Sample
26283679081057448b4bea1df5d3f9dd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26283679081057448b4bea1df5d3f9dd_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26283679081057448b4bea1df5d3f9dd_JaffaCakes118
-
Size
509KB
-
MD5
26283679081057448b4bea1df5d3f9dd
-
SHA1
75bcf63e3d0956772747f7c40c2580800d3dff41
-
SHA256
b48b2a9d8d1b48450e2648bf6a6a38035274979089ed5849d0d842a4a38031b5
-
SHA512
fb0ec912d6a3897dbbc9d1c3c56692d6d92cec8f133970d7a38a0b92332ddf9c45173fbd2dfcc8c7bbb9a67b6c2f9cf42bd1c35f35252f85381f736fd11ccf8d
-
SSDEEP
12288:/fSHtvsmGg8Y+sl+42wzGm/pMDwg0hJsS:/fSNvcg8lwzT/pmz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26283679081057448b4bea1df5d3f9dd_JaffaCakes118
Files
-
26283679081057448b4bea1df5d3f9dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb01a0fc3b776b726f021c130629577a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
user32
MessageBoxA
Sections
�� Size: - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�0 Size: - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�` Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 380KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE